CVE-2022-20224

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure in the Bluetooth stack with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220732646

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jul 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-202255.5In getSubscriptionProperty of SubscriptionController.java, there is a possible read of a sensitive identifier due to a missing permission ch CVE-2022-202263.9In finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to improper input validation. This could lead to loc CVE-2022-202275.5In USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with Us CVE-2022-202286.5In various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use after free. This could lead to remote info CVE-2022-202299.8In bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds write due to a missing bounds check. This c CVE-2022-20239.8Incorrect Use of Privileged APIs in GitHub repository polonel/trudesk prior to 1.2.4.CVE-2022-202305.5In choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate due to improper input validation. This could CVE-2022-202316.7In smc_intc_request_fiq of arm_gic.c, there is a possible out of bounds write due to improper input validation. This could lead to local esc CVE-2022-202336.7In param_find_digests_internal and related functions of the Titan-M source, there is a possible out of bounds write due to an incorrect boun CVE-2022-202347.5In Car Settings app, the NotificationAccessConfirmationActivity is exported. In NotificationAccessConfirmationActivity, it gets both 'mCompo CVE-2022-202355.5The PowerVR GPU kernel driver maintains an "Information Page" used by its cache subsystem. This page can only be written by the GPU driver i CVE-2022-202367.5A drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions: Android SoCAndroid ID: A-233124709